Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2021-80266)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. An attacker could exploit this vulnerability to remotely execute code...

Advantech WebAccess Stack Buffer Overflow Vulnerability (CNVD-2021-80272)

Advantech WebAccess is Advantech's suite of HMI/SCADA software based on a browser architecture. A stack buffer overflow vulnerability exists in Advantech WebAccess 9.02 and earlier versions. The vulnerability stems from a lack of proper validation of the length of user-supplied data. An attacker...

Advantech WebAccess bwocxrun.ocx CreateProcess方法远程命令执行漏洞

CVE ID:CVE-2014-0773 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess BWOCXRUN.BwocxrunCtrl.1 ActiveX控件bwocxrun.ocx中的CreateProcess方法存在安全漏洞，如果命令行中包含'\setup.exe', '\bwvbprt.exe'或'\bwvbprtl.exe'，可导致绕过该方法中的命令执行校验机制，以应用程序上下文执行任意命令。 0 Advantech WebAccess 7.1 Advantech WebAccess...

Advantech WebAccess AccessCode参数处理栈缓冲区溢出漏洞

CVE ID:CVE-2014-0767 Advantech WebAccess HMI/SCADA是一款HMI/SCADA软件。 Advantech WebAccess处理AccessCode参数时不正确过滤用户输入，允许远程攻击者利用漏洞提交特殊参数触发基于栈的缓冲区溢出，可使应用程序崩溃或执行任意代码。 0 Advantech WebAccess 7.1 Advantech WebAccess 7.2版本已修复该漏洞，建议用户下载使用： http://webaccess.advantech.com/...

Arc Informatique产品多个ActiveX控件漏洞

CVE ID: CVE-2011-4042,CVE-2011-4043,CVE-2011-4044,CVE-2011-4045 ARC Informatique是开发人机接口、监控和数据捕获HMI/SCADA软件的法国公司。 多个Arc Informatique产品在实现上存在多个安全漏洞，可被恶意用户利用操作某些数据并控制用户系统。 1）处理"SaveObject"和"LoadObject"方法SVUIGrd.ocx时存在的错误可被利用通过特制的"aStream"参数执行虚拟函数调用任意内存位置； 2）"GetExtendedColor"方法SVUIGrd.ocx中的错误可被利用破坏内...

DaqFactory 5.85 build 1853 - Stack Overflow

DaqFactory 5.85 build 1853 - Stack Overflow Luigi Auriemma Application: DAQFactory http://www.azeotech.com/daqfactory.php Versions: = 5.85 build 1853 Platforms: Windows Bug: stack overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

DaqFactory 5.85 build 1853 - Stack Overflow

Luigi Auriemma Application: DAQFactory http://www.azeotech.com/daqfactory.php Versions: = 5.85 build 1853 Platforms: Windows Bug: stack overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...